Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
File: 8H-pjVIdhMKNrsion3SIu86AAhU.mft (raw, json)
Hash identifier: EFHtASs74WgPvIHM+T16xa4oCn6rXGPdhvFqNBTSCn4=
Subject key identifier: 72:A7:9D:6D:7F:F7:D3:3E:61:F5:4C:70:E1:64:86:71:35:35:5E:1F
Authority key identifier: F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
Certificate issuer: /CN=f07fa98d521d84c28daec8a89f7488bbce800215
Certificate serial: 019F8F32BAF8C2FC7DFD53CF3262CBED00BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
Manifest number: 05EA
Signing time: Thu 23 Jul 2026 13:38:14 +0000
Manifest this update: Thu 23 Jul 2026 13:38:14 +0000
Manifest next update: Fri 24 Jul 2026 13:38:14 +0000
Files and hashes: 1: 8H-pjVIdhMKNrsion3SIu86AAhU.crl (hash: OqQfX14zyVlrb2tC7VNpsFoLNGim9jtVg/REy8FSuCE=)
2: 8_gr7ArTRAbIwtF4BAs2Yb1Q5X8.roa (hash: mNo3tCakCblgrlbHW+icbibgZLAMJGmCUvTiUz7GkBc=)
3: kKPD5eDNiWji9kQOiF2bwFsAh8k.asa (hash: B7uqniWZ472ELmFS1aZGpKGBhExPvlj3Ut0C+6TUuf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:32:ba:f8:c2:fc:7d:fd:53:cf:32:62:cb:ed:00:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07fa98d521d84c28daec8a89f7488bbce800215
Validity
Not Before: Jul 23 13:38:14 2026 GMT
Not After : Jul 24 13:38:14 2026 GMT
Subject: CN=72a79d6d7ff7d33e61f54c70e164867135355e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:fc:5d:68:3e:a1:e6:bf:9a:b1:d9:35:31:
5e:d6:ff:d5:c5:24:51:07:ee:53:9a:b4:50:b9:ed:
68:55:b9:1a:d2:63:56:02:3b:90:49:ed:0d:ef:8b:
ae:23:30:b7:09:c2:27:7a:e0:22:f6:36:07:8e:ca:
c0:ae:6e:18:3f:f6:d6:a6:d5:fa:42:62:7c:3a:57:
8d:42:6a:6a:78:6e:d4:7e:30:f8:a6:70:1b:67:f3:
89:8e:23:7f:e0:84:ba:5d:bd:82:75:dd:7f:27:df:
81:3b:1d:39:be:84:5e:d4:8b:f9:37:a4:0a:74:8a:
0c:c9:be:d3:1c:74:e8:10:21:8d:38:3f:26:5a:92:
1f:06:a7:50:3e:b9:c7:35:85:87:10:75:20:6b:13:
9c:57:28:29:cc:c8:96:d7:77:bf:83:93:bf:4b:cf:
50:dc:99:a5:95:e7:67:9a:46:02:0d:e3:88:58:5e:
81:21:1f:57:95:f3:b1:11:45:ee:5d:89:23:ef:57:
65:03:e9:3b:5e:39:56:c7:a3:28:6e:ee:6f:b3:c6:
b4:2e:b7:f1:dc:64:b5:bb:b8:96:cc:77:ba:d1:d4:
29:4f:0b:a6:a4:3b:63:1a:35:f5:9e:e1:5a:92:26:
96:f6:96:a8:b1:4e:c3:ad:d4:a9:d2:ea:58:50:cc:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A7:9D:6D:7F:F7:D3:3E:61:F5:4C:70:E1:64:86:71:35:35:5E:1F
X509v3 Authority Key Identifier:
keyid:F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6d:71:66:6f:ce:39:3c:d4:ef:f0:1b:4a:3f:01:2b:2b:94:
85:3e:f1:6a:6d:9a:c1:3d:a8:a9:c2:5b:46:49:68:74:51:56:
dd:d2:ea:26:6a:cc:cc:75:83:83:f0:51:d4:87:04:99:45:87:
7c:31:7e:1a:db:11:21:fc:eb:23:b4:b8:9f:47:e6:9a:70:17:
08:b1:e7:a1:b3:65:d3:37:8f:a2:1f:17:ff:53:be:46:e4:d4:
a5:0c:d0:42:15:e7:88:9b:0b:af:14:e9:ec:7b:93:02:ec:9e:
cd:0f:0b:a2:31:0a:00:dc:75:c4:9e:97:d9:70:f7:a4:e6:79:
20:92:35:b8:7f:83:70:ac:be:a3:d7:d6:bb:db:38:ca:47:96:
61:b6:76:2a:eb:56:b4:c9:70:4c:e4:96:05:35:0a:aa:77:fa:
28:1e:72:fd:42:a7:91:1a:9f:36:07:46:f2:ee:ae:ad:6f:79:
8d:ef:f4:c7:05:de:2a:d6:bb:92:8c:65:f2:ef:0c:84:4a:67:
64:40:41:92:ec:ea:10:60:ce:c7:d5:0f:9f:a9:88:36:3f:83:
6b:0c:46:04:46:7b:90:80:9d:7d:f3:39:ed:2d:36:95:6d:5e:
07:17:2a:98:ba:f3:13:ca:63:39:30:fd:d5:84:28:be:54:01:
62:f9:03:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PMrr4wvx9/VPPMmLL7QC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwN2ZhOThkNTIxZDg0YzI4ZGFlYzhhODlmNzQ4OGJiY2U4
MDAyMTUwHhcNMjYwNzIzMTMzODE0WhcNMjYwNzI0MTMzODE0WjAzMTEwLwYDVQQD
Eyg3MmE3OWQ2ZDdmZjdkMzNlNjFmNTRjNzBlMTY0ODY3MTM1MzU1ZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyL8XWg+oea/mrHZNTFe1v/VxSRR
B+5TmrRQue1oVbka0mNWAjuQSe0N74uuIzC3CcIneuAi9jYHjsrArm4YP/bWptX6
QmJ8OleNQmpqeG7UfjD4pnAbZ/OJjiN/4IS6Xb2Cdd1/J9+BOx05voRe1Iv5N6QK
dIoMyb7THHToECGNOD8mWpIfBqdQPrnHNYWHEHUgaxOcVygpzMiW13e/g5O/S89Q
3JmllednmkYCDeOIWF6BIR9XlfOxEUXuXYkj71dlA+k7XjlWx6Mobu5vs8a0Lrfx
3GS1u7iWzHe60dQpTwumpDtjGjX1nuFakiaW9paosU7DrdSp0upYUMwejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKnnW1/99M+YfVMcOFkhnE1NV4fMB8GA1UdIwQY
MBaAFPB/qY1SHYTCja7IqJ90iLvOgAIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEgtcGpWSWRoTUtOcnNpb24zU0l1ODZBQWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMjVmODktNjM5Yi00ZjllLWFjOWQt
N2Q5MjhjMTMxNzI0LzEvOEgtcGpWSWRoTUtOcnNpb24zU0l1ODZBQWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hMjVmODktNjM5Yi00ZjllLWFjOWQtN2Q5MjhjMTMxNzI0
LzEvOEgtcGpWSWRoTUtOcnNpb24zU0l1ODZBQWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARG1xZm/O
OTzU7/AbSj8BKyuUhT7xam2awT2oqcJbRklodFFW3dLqJmrMzHWDg/BR1IcEmUWH
fDF+GtsRIfzrI7S4n0fmmnAXCLHnobNl0zePoh8X/1O+RuTUpQzQQhXniJsLrxTp
7HuTAuyezQ8LojEKANx1xJ6X2XD3pOZ5IJI1uH+DcKy+o9fWu9s4ykeWYbZ2KutW
tMlwTOSWBTUKqnf6KB5y/UKnkRqfNgdG8u6urW95je/0xwXeKta7koxl8u8MhEpn
ZEBBkuzqEGDOx9UPn6mINj+DawxGBEZ7kICdffM57S02lW1eBxcqmLrzE8pjOTD9
1YQovlQBYvkD5A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:55 2026 by rpki-client